org.broadleafcommerce.openadmin.server.security.ldap

Class BroadleafAdminLdapUserDetailsMapper

java.lang.Object

org.springframework.security.ldap.userdetails.LdapUserDetailsMapper

org.broadleafcommerce.openadmin.server.security.ldap.BroadleafAdminLdapUserDetailsMapper

All Implemented Interfaces:

org.springframework.security.ldap.userdetails.UserDetailsContextMapper

public class BroadleafAdminLdapUserDetailsMapper
extends org.springframework.security.ldap.userdetails.LdapUserDetailsMapper

This is used to map LDAP principal and authorities into BLC security model.

Author:

Kelly Tisdell

Field Summary

Fields

Modifier and Type	Field and Description
protected Map<String,String[]>	roleNameSubstitutions
protected AdminSecurityService	securityService

Constructor Summary

Constructors

Constructor and Description
BroadleafAdminLdapUserDetailsMapper()

Method Summary

Methods

Modifier and Type	Method and Description
org.springframework.security.core.userdetails.UserDetails	mapUserFromContext(org.springframework.ldap.core.DirContextOperations ctx, String username, Collection<? extends org.springframework.security.core.GrantedAuthority> authorities)
protected AdminUser	saveAdminUserAndSecurityData(AdminUser adminUser, Set<AdminRole> adminRoles)
void	setRoleNameSubstitutions(Map<String,String[]> roleNameSubstitutions) This allows you to declaratively set a map containing values that will substitute role names from LDAP to Broadleaf roles names in cases that they might be different.

Methods inherited from class org.springframework.security.ldap.userdetails.LdapUserDetailsMapper

createAuthority, mapPassword, mapUserToContext, setConvertToUpperCase, setPasswordAttributeName, setRoleAttributes, setRolePrefix

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

securityService

protected AdminSecurityService securityService

roleNameSubstitutions

protected Map<String,String[]> roleNameSubstitutions

Constructor Detail

BroadleafAdminLdapUserDetailsMapper

public BroadleafAdminLdapUserDetailsMapper()

Method Detail

mapUserFromContext

public org.springframework.security.core.userdetails.UserDetails mapUserFromContext(org.springframework.ldap.core.DirContextOperations ctx,
                                                                           String username,
                                                                           Collection<? extends org.springframework.security.core.GrantedAuthority> authorities)

Specified by:

mapUserFromContext in interface org.springframework.security.ldap.userdetails.UserDetailsContextMapper

Overrides:

mapUserFromContext in class org.springframework.security.ldap.userdetails.LdapUserDetailsMapper

saveAdminUserAndSecurityData

protected AdminUser saveAdminUserAndSecurityData(AdminUser adminUser,
                                     Set<AdminRole> adminRoles)

setRoleNameSubstitutions

public void setRoleNameSubstitutions(Map<String,String[]> roleNameSubstitutions)

This allows you to declaratively set a map containing values that will substitute role names from LDAP to Broadleaf roles names in cases that they might be different. For example, if you have a role specified in LDAP under "memberOf" with a DN of "Marketing Administrator", you might want to map that to the role "ADMIN". By default the prefix "ROLE_" will be pre-pended to this name. So to configure this, you would specify: With this configuration, all roles returned by LDAP that have a DN of "Marketing Administrator" will be converted to "ADMIN"

Parameters:

roleNameSubstitutions -